Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: c740HNyvFUCGlGbrUn5EO0PbzKy9Ez038r0PZMjiLKg=
Subject key identifier: FB:5B:3E:17:CA:DD:2E:B5:85:DD:2A:B0:B5:C5:5C:6C:9F:B5:03:13
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 01A0C9A1F1A8817BC50DA735ABA92D3E4D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0ED9
Signing time: Tue 22 Sep 2026 15:00:28 +0000
Manifest this update: Tue 22 Sep 2026 15:00:28 +0000
Manifest next update: Wed 23 Sep 2026 15:00:28 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: bP4+MpecXfht0pJKl7KOZhuedoAcHQm2REYpmecr69Q=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:f1:a8:81:7b:c5:0d:a7:35:ab:a9:2d:3e:4d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Sep 22 15:00:28 2026 GMT
Not After : Sep 23 15:00:28 2026 GMT
Subject: CN=fb5b3e17cadd2eb585dd2ab0b5c55c6c9fb50313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:35:b3:2e:95:08:27:3d:fd:69:e9:fb:ca:
e1:36:0f:d8:0c:17:6a:ea:e3:2a:c0:6a:b7:ac:38:
c8:64:ce:d4:43:ec:56:47:57:cc:e3:e3:9b:2c:8f:
c5:a0:08:0f:3c:f9:b3:6b:32:66:2a:75:57:76:22:
8d:72:5a:49:dc:72:39:74:30:46:47:a4:2c:35:77:
69:c1:35:c1:00:0a:f8:d8:44:83:76:aa:6e:33:0d:
c5:25:96:6f:bd:c8:50:8d:34:9a:ea:33:7f:e7:3a:
14:fd:07:2d:7e:69:0b:9d:09:96:cf:3c:a6:5f:50:
00:68:c9:71:da:bd:50:cb:59:f3:de:5b:64:ec:6d:
91:89:6f:92:46:cb:9b:24:e7:28:7f:d1:a4:42:37:
7e:37:f6:98:fa:aa:f2:73:6a:d5:35:75:46:6f:6c:
9c:29:3f:ae:13:2a:6e:bd:5f:23:93:76:fc:29:18:
5c:45:15:15:19:a8:b7:08:86:bc:ef:36:5a:c1:29:
e9:5b:fb:7d:a3:3f:58:85:df:ad:05:cd:09:e9:03:
55:a7:8d:fa:84:82:fb:68:ff:00:67:fc:e3:3d:12:
f3:be:57:8d:6b:66:9b:61:4b:b3:ff:fb:a0:d3:50:
7e:f5:10:b6:dd:86:d2:09:cc:db:4d:ac:80:ff:d3:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5B:3E:17:CA:DD:2E:B5:85:DD:2A:B0:B5:C5:5C:6C:9F:B5:03:13
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7f:f1:dd:0a:fa:66:23:71:b9:9f:94:d4:6d:4f:3c:f8:e3:
e6:ea:42:5a:5a:f8:d9:ba:1f:e2:59:42:d2:cf:8a:af:cd:6e:
16:00:d9:1b:be:af:97:58:0c:bc:78:fa:04:47:c4:33:dc:b3:
3a:b3:91:e4:58:68:b8:30:fa:65:7e:a0:f3:34:d1:14:4b:48:
69:be:e1:d5:ce:55:cc:a6:5a:b2:e7:71:fa:f6:c4:c4:a8:af:
4a:da:05:78:fb:b2:02:14:68:b8:fe:ef:cb:9f:33:42:10:5b:
a1:4b:c5:f6:5e:8a:11:9d:7a:ed:e2:5b:87:34:9e:5c:24:54:
ab:5e:c6:33:55:f8:fe:b3:a5:33:a7:68:0d:6f:3c:a3:c6:f1:
f0:42:7f:4e:e0:5a:e5:29:84:d9:81:6d:34:45:67:f8:f7:39:
81:3a:ba:23:82:ab:16:9b:c2:ff:13:a7:a3:04:b6:17:25:c9:
12:84:10:c0:d7:61:fe:4c:67:da:a2:07:05:65:70:ff:f0:b9:
d4:64:5e:1b:9b:79:98:c4:57:90:28:bd:1f:c1:37:2d:50:16:
27:0a:3d:58:b3:17:73:23:40:2b:91:29:5b:b0:0b:19:62:20:
01:f1:91:a2:14:3b:88:3a:5d:34:55:18:87:d2:0f:7d:49:eb:
27:e0:79:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJofGogXvFDac1q6ktPk0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzM0MGVlNWI5ZGFmMWE2ODE4ZjBkZjQwN2ZhNTk3NTg4
NmIxMGYwHhcNMjYwOTIyMTUwMDI4WhcNMjYwOTIzMTUwMDI4WjAzMTEwLwYDVQQD
EyhmYjViM2UxN2NhZGQyZWI1ODVkZDJhYjBiNWM1NWM2YzlmYjUwMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7g1sy6VCCc9/Wnp+8rhNg/YDBdq
6uMqwGq3rDjIZM7UQ+xWR1fM4+ObLI/FoAgPPPmzazJmKnVXdiKNclpJ3HI5dDBG
R6QsNXdpwTXBAAr42ESDdqpuMw3FJZZvvchQjTSa6jN/5zoU/QctfmkLnQmWzzym
X1AAaMlx2r1Qy1nz3ltk7G2RiW+SRsubJOcof9GkQjd+N/aY+qryc2rVNXVGb2yc
KT+uEypuvV8jk3b8KRhcRRUVGai3CIa87zZawSnpW/t9oz9Yhd+tBc0J6QNVp436
hIL7aP8AZ/zjPRLzvleNa2abYUuz//ug01B+9RC23YbSCczbTayA/9M6ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtbPhfK3S61hd0qsLXFXGyftQMTMB8GA1UdIwQY
MBaAFOXDQO5bna8aaBjw30B/pZdYhrEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2It
NmUxZjJmNjg1MWNmLzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2ItNmUxZjJmNjg1MWNm
LzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMn/x3Qr6
ZiNxuZ+U1G1PPPjj5upCWlr42bof4llC0s+Kr81uFgDZG76vl1gMvHj6BEfEM9yz
OrOR5FhouDD6ZX6g8zTRFEtIab7h1c5VzKZasudx+vbExKivStoFePuyAhRouP7v
y58zQhBboUvF9l6KEZ167eJbhzSeXCRUq17GM1X4/rOlM6doDW88o8bx8EJ/TuBa
5SmE2YFtNEVn+Pc5gTq6I4KrFpvC/xOnowS2FyXJEoQQwNdh/kxn2qIHBWVw//C5
1GReG5t5mMRXkCi9H8E3LVAWJwo9WLMXcyNAK5EpW7ALGWIgAfGRohQ7iDpdNFUY
h9IPfUnrJ+B5kg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:08:04 2026 by rpki-client